[TLS]Re: Kicking off the TLS 1.3 formal analysis triage panel

2024-06-01 Thread Rob Sayre
Oh, I think almost certainly. They may not feel the need to say anything unless they find a flaw, but they are here. You can see them working in rustls etc. Lots of other big company people are like this, just contributing via a consumer email address. They don't usually hide it, but sometimes you'

[TLS]Re: Kicking off the TLS 1.3 formal analysis triage panel

2024-06-01 Thread Tim Bray
Is anyone from AWS active on the WG? When I left AWS a few years back, they had a very active group entirely dedicated to this kind of work, and any version of TLS is obviously relevant to AWS. Might be worth reaching out to them. On Jun 1, 2024 at 1:32:20 PM, Eric Rescorla wrote: > Thanks for

[TLS]Re: Kicking off the TLS 1.3 formal analysis triage panel

2024-06-01 Thread Eric Rescorla
On Fri, May 31, 2024 at 7:55 AM Cas Cremers wrote: > Hi Usama, > > I think there is some possible misunderstanding of the panel's comments > from your side. The panel did not discuss using any tool over any other. If > someone writes "a Tamarin-like" analysis then this doesn't necessarily > mean

[TLS]Re: Kicking off the TLS 1.3 formal analysis triage panel

2024-06-01 Thread Eric Rescorla
Thanks for posting this. It's great to see the triage panel coming together. This is very thorough and helpful. My take-home from this report is that the security properties of 8773-bis are not immediately obvious and therefore that prior to advancing it we should actually have some sort of more